Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier: nNYJB6pz6Wak/PdcCihXNdKMOg5TcSSLTySeXmyheQk=
Subject key identifier: 39:54:5E:D7:16:32:13:4E:D3:7D:7E:82:BB:65:10:5A:17:A3:41:E7
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer: /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial: 01960E9F69E2E44EC241F50F9E8C6103D848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number: 01CF
Signing time: Mon 07 Apr 2025 05:00:50 +0000
Manifest this update: Mon 07 Apr 2025 05:00:50 +0000
Manifest next update: Tue 08 Apr 2025 05:00:50 +0000
Files and hashes: 1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: r5KMyouno6/XZYvjza9uMsfYPCtAgTzG6L67QT0qWVg=)
2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:9f:69:e2:e4:4e:c2:41:f5:0f:9e:8c:61:03:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
Validity
Not Before: Apr 7 05:00:50 2025 GMT
Not After : Apr 8 05:00:50 2025 GMT
Subject: CN=39545ed71632134ed37d7e82bb65105a17a341e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:90:8b:f8:3d:3a:e7:16:2f:32:3c:fb:28:
3f:fd:6e:91:d8:0d:96:e1:3d:19:2b:ab:12:62:ef:
36:db:43:89:15:c6:c7:b1:20:4d:9c:b9:fe:b8:98:
c3:ce:f9:92:97:77:d0:fa:13:ca:99:62:d9:0d:04:
c7:c6:ee:8e:bb:d2:af:d1:22:0e:41:22:a7:4b:38:
66:f5:f4:c6:53:53:cc:9e:22:b8:35:ad:bf:4d:08:
e0:7f:f1:19:99:aa:69:9e:01:b9:08:ac:d1:ff:bf:
1d:c3:08:3e:02:b8:7c:bd:d3:90:5a:0e:c2:1e:f7:
1c:1d:75:11:6c:e5:05:45:52:5e:77:64:11:e1:c8:
df:25:e4:fa:9b:26:af:ab:1e:3f:9c:91:97:cb:59:
21:38:fb:8f:df:fd:90:f2:54:ef:a0:ba:b6:38:b1:
7c:a5:2c:52:a5:2f:22:db:16:e7:e8:06:64:a1:0f:
9d:ef:99:5d:e9:51:eb:52:af:d6:40:74:86:e3:7b:
f3:aa:18:2c:8b:ba:e4:e1:54:cd:c6:47:1e:c9:8a:
4a:23:cb:22:fc:67:e4:80:74:85:ad:fd:4b:f6:81:
1d:2f:1d:77:6e:49:a6:7b:07:d0:95:8e:d0:f4:a3:
8b:e9:44:d4:57:a4:a4:36:a7:8f:21:da:04:47:a6:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:5E:D7:16:32:13:4E:D3:7D:7E:82:BB:65:10:5A:17:A3:41:E7
X509v3 Authority Key Identifier:
keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0f:fd:45:6d:fb:34:19:24:89:48:91:52:e6:7d:c1:c4:06:
7e:fd:44:88:63:94:62:2e:1b:29:d0:c6:70:19:b1:3d:c6:a5:
be:f0:ba:16:65:52:1c:7d:51:09:78:af:ba:69:9b:7c:1d:49:
c8:cb:0a:40:36:04:14:d2:81:72:f3:10:94:ca:e8:c8:6a:18:
43:1b:89:3e:d9:dc:ed:4c:e0:5d:0f:fb:bb:64:4b:d0:7a:e2:
4c:57:d7:4b:f1:49:17:f1:4c:01:f4:9e:f6:fc:ec:1b:77:e2:
17:ca:c3:c0:03:97:54:c3:af:6e:00:0f:34:f9:12:45:52:1e:
b2:3d:f8:81:73:fb:6b:58:f1:d5:1f:5d:3b:c6:86:a2:b0:16:
a8:4f:00:dd:bc:81:44:20:ef:9e:46:5c:9f:a8:24:6b:fa:f8:
bf:56:10:6a:32:63:21:ba:50:f7:97:d7:e6:ef:c7:3e:e9:2c:
d9:15:39:8c:eb:34:50:04:59:4f:61:23:ad:37:ef:48:aa:d1:
f1:4e:93:06:0d:a2:4b:b1:bc:d9:54:58:5c:04:c4:10:42:63:
1a:66:bf:c9:f8:9c:c5:d6:b6:bd:ba:54:1d:34:73:00:b7:35:
88:7c:0f:da:48:4d:c7:34:64:a3:8d:7e:78:26:53:14:e9:f3:
16:22:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:13 2025 by rpki-client